News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 80 so far | 15 |
Developing
Thu 9 May 202454 articles
- Poland says Russian military hackers target its govt networks
Poland says a state-backed threat group linked to Russia's military intelligence service (GRU) has been targeting Polish government institutions throughout the week. [...]
BleepingComputer - Monday.com removes "Share Update" feature abused for phishing attacks
Project management platform Monday.com has removed its "Share Update" feature after threat actors abused it in phishing attacks. [...]
BleepingComputer - 'The Mask' Espionage Group Resurfaces After 10-Year Hiatus
Researchers recently spotted the Spanish-speaking threat actor — with nearly 400 previous victims under its belt — in a new campaign in Latin America and Central Africa.
Dark Reading - 2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts
F5 customers should patch immediately, though even that won't protect them from every problem with their networked devices.
Dark Reading - Citrix warns admins to manually mitigate PuTTY SSH client bug
Citrix notified customers this week to manually mitigate a PuTTY SSH client vulnerability that could allow attackers to steal a XenCenter admin's private SSH key. [...]
BleepingComputer - Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity
Accenture Federal Services wins $789 million U.S. Navy SHARKCAGE cybersecurity contract.
SecurityWeek - Aggressive Cloud-Security Player Wiz Scores $1B in Funding Round
The latest round of investment prices the fast-growing cloud native application protection platform (CNAPP) at $12 billion with a simple mandate: Grow quickly through acquisition.
Dark Reading - LockBit Claims Wichita as Its Victim 2 Days After Ransomware Attack
The city is still investigating the attack, and neither the group nor city officials have offered details about the ransomware demands.
Dark Reading - AT&T delays Microsoft 365 email delivery due to spam wave
AT&T's email servers are blocking connections from Microsoft 365 due to a "high volume" spam wave originating from Microsoft's service. [...]
BleepingComputer - New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation
Researchers have detailed a Virtual Private Network (VPN) bypass technique dubbed TunnelVision that allows threat actors to snoop on victim's network traffic by just being on the same local network. The "decloaking" method has been assigned the CVE…
The Hacker News - Dell discloses data breach impacting millions of customers
Dell disclosed a security breach that exposed millions of customers’ names and physical mailing addresses. IT giant Dell suffered a data breach exposing customers’ names and physical addresses, the company notified impacted individuals. Dell compromised.…
Security Affairs - Dell Says Customer Names, Addresses Stolen in Database Breach
Tech giant notifies millions of customers that full names and physical mailing addresses were stolen during a security incident.
SecurityWeek - Vast Network of Fake Web Shops Defrauds 850,000 & Counting
China-based cybercriminal group "BogusBazaar" created tens of thousands of fraudulent online stores based on expired domains to steal payment credentials.
Dark Reading - British Columbia investigating cyberattacks on government networks
The Government of British Columbia is investigating multiple "cybersecurity incidents" that have impacted the Canadian province's government networks. [...]
BleepingComputer - Is Your Credit Card Safe: 2024 Analysis of E-Commerce Websites in Stealer Logs
Is Your Credit Card Info In Danger: 2024 Analysis of E-Commerce Websites in Stealer Logs The security of sensitive data in e-commerce, such as email addresses and associated accounts, is critical. As we investigate the vulnerabilities and cyber threats that…
SOCRadar - Dell warns of data breach, 49 million customers allegedly affected
Dell is warning customers of a data breach after a threat actor claimed to have stolen information for approximately 49 million customers. [...]
BleepingComputer - Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign
Polish government institutions have been targeted as part of a large-scale malware campaign orchestrated by a Russia-linked nation-state actor called APT28. "The campaign sent emails with content intended to arouse the recipient's interest and persuade him…
The Hacker News - Criminal Use of AI Growing, But Lags Behind Defenders
When not scamming other criminals, criminals are concentrating on the use of mainstream AI products rather than developing their own AI systems.
SecurityWeek - Critical Spin Framework Flaw: Sandbox Escape Vulnerability Exposed (CVE-2024-32980)
The Spin project, an open-source framework designed for building and running secure and fast cloud microservices using WebAssembly, has recently issued a critical security advisory. The advisory pertains to a significant vulnerability, identified as...
SecurityOnline - How Government Agencies Can Leverage Grants to Shore Up Cybersecurity
With the help of grant funding, agencies and organizations can better defend themselves and their constituents.
Dark Reading - Dark Web Profile: APT31
Dark Web Profile: APT31 Advanced Persistent Threat Group 31 (APT31), also known by aliases like ZIRCONIUM or Judgment Panda, represents a sophisticated cybersecurity threat with ties to state-sponsored activities. Threat Actor Card of APT31 This group is…
SOCRadar - Mirai botnet also spreads through the exploitation of Ivanti Connect Secure bugs
Threat actors exploit recently disclosed Ivanti Connect Secure (ICS) vulnerabilities to deploy the Mirai botnet. Researchers from Juniper Threat Labs reported that threat actors are exploiting recently disclosed Ivanti Connect Secure (ICS) vulnerabilities…
Security Affairs - LockBit Takes Credit for City of Wichita Ransomware Attack
The LockBit cybercrime group has taken credit for the recent ransomware attack that disrupted City of Wichita systems.
SecurityWeek - Social engineering in the era of generative AI: Predictions for 2024
Breakthroughs in large language models (LLMs) are driving an arms race between cybersecurity and social engineering scammers. Here’s how it’s set to play out in 2024. For businesses, generative AI is both a curse and an opportunity. As enterprises race to…
securityintelligence.com - Threat Actors Accessed Cancer patients’ Data left Open by Testing Lab
Guardant Health, a leading cancer screening and precision medicine company, has disclosed a data breach that left sensitive patient information publicly accessible online for over three years. The California-based firm, which has performed over 500,000 blood…
gbhackers.com - CISA Announces CVE Enrichment Project ‘Vulnrichment’
CISA’s Vulnrichment project is adding important information to CVE records to help improve vulnerability management processes.
SecurityWeek - Cyber Attack On Data Center Cooling Systems Leads To Disruption
Critical operational elements such as data storage, processing, backups, and recovery heavily rely on Australian industrial organizations’ data centers. These facilities support various business functions, including productivity tools, transaction-intensive…
gbhackers.com - BetterHelp Customers Begin Receiving Refund Notices From $7.8M Data Privacy Settlement, FTC Says
BetterHelp customers have started receiving refund notices from a $7.8 million data privacy settlement, the FTC says.
SecurityWeek - Executive Interview: CVA’s Cyber Leaders on Navigating Emerging Threats
Executive Interview: CVA’s Cyber Leaders on Navigating Emerging Threats In the rapidly evolving world of digital security, maintaining strong cybersecurity measures is no longer optional but crucial, particularly for industries managing critical…
SOCRadar - What’s New in the NIS2 Directive? Requirements, Affected Organizations & All You Need to Know
What’s New in the NIS2 Directive? Requirements, Affected Organizations & All You Need to Know The European Union is ushering in a new era of stringent regulations with the introduction of the NIS2 Directive, officially designated as E.U. Directive 2022/2055.…
SOCRadar - Zscaler is investigating data breach claims
Cybersecurity firm Zscaler is investigating claims of a data breach after hackers offered access to its network. Cybersecurity firm Zscaler is investigating allegations of a data breach following reports that threat actors are offering for sale access to its…
Security Affairs - New Guide: How to Scale Your vCISO Services Profitably
Cybersecurity and compliance guidance are in high demand among SMEs. However, many of them cannot afford to hire a full-time CISO. A vCISO can answer this need by offering on-demand access to top-tier cybersecurity expertise. This is also an opportunity for…
The Hacker News - Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery
Two recently disclosed security flaws in Ivanti Connect Secure (ICS) devices are being exploited to deploy the infamous Mirai botnet. That's according to findings from Juniper Threat Labs, which said the vulnerabilities CVE-2023-46805 and CVE-2024-21887 ...
The Hacker News - SocGholish Attacks Enterprises Via Fake Browser Updates
Enterprises are being targeted by the malware known as SocGholish through deceptive browser update prompts. This malware, notorious for its stealth and the complexity of its delivery mechanisms, has been identified in a series of incidents involving fake…
gbhackers.com - DocGo patient health data stolen in cyberattack
Medical health care provider DocGo has disclosed in a form 8-K that it experienced a cybersecurity incident involving some of the company’s systems. As part of the investigation of the incident, the company says it has determined that the attacker accessed…
Malwarebytes - F5 Patches Dangerous Vulnerabilities in BIG-IP Next Central Manager
F5 has patched two potentially serious vulnerabilities in BIG-IP Next that could allow an attacker to take full control of a device.
SecurityWeek - Alert! Hackers Running Thousands of Fake Webshops : 850,000+ Cards Stolen
A sprawling cybercrime network, “BogusBazaar,” has stolen credit card details from over 850,000 online shoppers, mainly in Western Europe and the United States, by operating tens of thousands of fraudulent e-commerce websites. Security researchers estimate…
gbhackers.com